Threat Intelligence Analyst

Jobtailor; Brasília; Presencial; BRL 120 000 - 180 000; Tempo integral

Resumo da oferta

Jobtailor is seeking a Cyber Threat Intelligence professional to lead research across OSINT, the Surface Web, Deep Web and Dark Web, identifying threats and campaigns.

You will map findings to MITRE ATT&CK, correlate IoCs, and develop automation in Python to enrich intelligence for CTI, SOC, and Purple Team activities. Strong reporting and stakeholder communication are essential.

Qualificações

• Degree in IT, Cybersecurity or related field preferred.
• Professional experience in Cyber Threat Intelligence (CTI).
• Knowledge of OSINT, Surface Web, Deep Web and Dark Web.
• Knowledge of MITRE ATT&CK, IoCs, TTPs, and cyber threat analysis.
• Knowledge of ransomware, APTs, phishing, and malicious campaigns.
• Experience with EASM/Attack Surface Management and tools like Shodan, Maltego.
• Experience with MISP and Threat Intelligence platforms.
• Experience preparing technical and executive reports.
• Nice to have: Python for automation.
• Nice to have: Docker and container knowledge.
• Nice to have: Malware analysis knowledge.
• Nice to have: CTI/EASM tool development.
• Nice to have: SIEM, SOC, Threat Hunting
• Nice to have: Intelligence frameworks and methodologies
• Nice to have: English proficiency
• Nice to have: Certifications related to Cybersecurity/CTI/OSINT/Threat Intelligence

Responsabilidades

• Conduct Cyber Threat Intelligence activities at strategic, tactical, and operational levels.
• Research OSINT, Surface Web, Deep Web, and Dark Web for threats and campaigns.
• Identify, validate, enrich, and correlate IoCs; analyze TTPs; map to MITRE ATT&CK.
• Analyze CVEs, the external attack surface, and EASM trends.
• Develop intelligence to support Threat Hunting, SOC, and Purple Team.
• Perform initial malware and phishing analysis.
• Administer CTI platforms such as MISP and related tools.
• Develop Python automations for data collection, processing, and enrichment.
• Prepare technical and executive reports, threat bulletins, and briefings.
• Support evolution of CTI processes, tools, and capabilities.
• Present analyses and recommendations to clients and stakeholders.
• Collaborate with technical and non-technical teams.

Conhecimentos

CTI Knowledge

MITRE ATT&CK

OSINT Research

Threat Intelligence Reporting

Python Automation

Formação académica

Degree in IT/Cybersecurity

Ferramentas

MISP

Shodan

Maltego

SIEM

Docker

Descrição da oferta de emprego

• Conduct Cyber Threat Intelligence activities at the strategic, tactical, and operational levels
• Conduct research and monitoring across OSINT, the Surface Web, Deep Web, and Dark Web, identifying threats, groups, actors, campaigns, ransomware, and APTs
• Identify, validate, enrich, and correlate IoCs; analyze TTPs; and perform mappings based on MITRE ATT&CK
• Conduct research and analysis related to CVEs, vulnerabilities, exposures, and the external attack surface (EASM)
• Develop intelligence to support Threat Hunting, SOC, and Purple Team activities
• Perform initial malware and phishing analysis
• Administer and use Threat Intelligence platforms, such as MISP and other market solutions
• Develop Python automations and integrations for collecting, processing, correlating, and enriching information
• Prepare technical and executive reports, threat reports, bulletins, and security briefings, presenting detection, mitigation, and prevention recommendations
• Support the evolution of Threat Intelligence processes, tools, and capabilities
• Present analyses, results, and recommendations to clients and stakeholders
• Work collaboratively with technical and non-technical teams, contributing to the sharing and application of threat intelligence

Requirements

• A completed degree in Information Technology, Cybersecurity, or related fields is preferred
• Professional experience in Cyber Threat Intelligence (CTI)
• Knowledge of OSINT, the Surface Web, Deep Web, and Dark Web
• Knowledge of MITRE ATT&CK, IoCs, TTPs, and cyber threat analysis
• Knowledge of ransomware, APTs, phishing, and malicious campaigns
• Knowledge of EASM / Attack Surface Management and information-gathering tools such as Shodan, Maltego, or similar solutions
• Knowledge of Threat Intelligence platforms, especially MISP
• Experience analyzing, contextualizing, and communicating threats, including preparing technical and executive reports
• Nice to have: Python knowledge for automation
• Nice to have: Docker and container knowledge
• Nice to have: Malware analysis knowledge
• Nice to have: Experience developing tools for CTI/EASM
• Nice to have: Knowledge of SIEM, SOC, and Threat Hunting
• Nice to have: Knowledge of intelligence frameworks and methodologies
• Nice to have: Technical/intermediate or advanced English proficiency
• Nice to have: Certifications related to Cybersecurity, CTI, OSINT, or Threat Intelligence

Core Competencies

Demonstrates expertise in Cyber Threat Intelligence, including research and analysis across various web layers, threat identification, and the use of intelligence platforms. Proficient in developing automation solutions and preparing comprehensive reports to support threat mitigation and prevention strategies.

Highest-signal resume keywords

• Cyber Threat Intelligence (CTI)
• MITRE ATT&CK Framework
• Threat Intelligence Platforms (MISP)
• Python Automation
• OSINT Research

Hard Skills

• Cyber Threat Analysis
• Malware Analysis
• Phishing Analysis
• IoC Correlation
• TTP Analysis
• EASM / Attack Surface Management
• Vulnerability Analysis
• Technical Report Writing
• Threat Hunting
• Container Knowledge (Docker)

Soft Skills

• Collaboration
• Communication
• Presentation Skills
• Analytical Thinking
• Problem Solving

Certifications & Qualifications

• Cybersecurity Certifications
• CTI Certifications
• OSINT Certifications
• Threat Intelligence Certifications

Industry Keywords

• OSINT
• Surface Web
• Deep Web
• Dark Web
• Ransomware
• APTs
• Threat Campaigns
• External Attack Surface

Tools & Technologies

• MISP
• Shodan
• Maltego
• SIEM
• SOC